Privacy & Cookie Policy

The short version

This website carries no analytics, no tracking or advertising technology, and no third-party fonts. It sets no cookies at all. The only information we hold about you is what you choose to type into the contact form, and it is stored in the European Union.

That is unusual enough to be worth stating plainly rather than leaving you to work out from the detail below.

Who we are

Ratekon OÜ (registry code 16551475, VAT EE102874671), Narva mnt 5, 10117 Tallinn, Estonia, is the controller for personal data collected through ratekon.com.

You can reach us about anything in this policy at contact@ratekon.com.

What the contact form collects

The contact form is the only place this site collects personal data. It asks for:

• First and last name
• Email address (entered twice, to catch typing errors)
• Job profile, company name and industry — all optional
• What you are interested in, and which service — all optional
• Your message
• Whether you agreed to hear from us about other things

Why we are allowed to hold it

We use your name, contact details and message to answer you. The lawful basis is Article 6(1)(b) of the GDPR where you are asking about working with us, and Article 6(1)(f) — our legitimate interest in responding to enquiries — otherwise.

If you tick the marketing box, that separate permission rests on Article 6(1)(a), consent, and you can withdraw it at any time by emailing us. Withdrawing it does not affect anything we sent before.

The form also carries a hidden field that real people never fill in. If it arrives filled in we treat the submission as automated. That rests on Article 6(1)(f), our interest in not drowning in spam.

Who else sees it

Cloudflare, Inc. hosts this website, stores the contact form submissions in its D1 database, and stores images in its R2 storage. The database runs in Cloudflare’s Western Europe region and the media store in its Eastern Europe region, so this data is held in the EU. Cloudflare is a US company acting as our processor.

Resend delivers the notification email that tells us a form has been submitted, and therefore handles what you wrote in order to deliver it.

That notification arrives in a mailbox hosted by Google Workspace, so Google processes it as our mail provider.

Nobody else receives it. We do not sell personal data and we have no advertising partners, because we run no advertising.

Spam protection and your IP address

The contact form is protected by Cloudflare Turnstile. When you submit the form, your IP address is sent to Cloudflare so it can confirm the submission came from a person. We do not store your IP address, and there is no column for it in our database.

In the configuration this site uses, Turnstile sets no cookie and writes nothing to your device.

Separately, Cloudflare processes IP addresses and browser details as part of delivering any website, in the way every hosting provider does. That is covered by Cloudflare’s own privacy documentation.

Cookies: there are none

This site sets no cookies. Not analytics cookies, not preference cookies, not "essential" ones. We checked the responses the site actually returns, and none of them sets a cookie.

Two small values are saved in your browser’s local storage. Local storage is not a cookie: it stays on your device and is never sent to us or to anyone else.

• ratekon-cookie-consent — what you chose in the cookie notice, so you are not asked again. Stays until you clear your browser data.
• ratekon-a11y — whether you switched on larger text and stronger contrast. Stays until you clear your browser data.

No analytics, no tracking, no third-party fonts

We do not measure visits. There is no Google Analytics, no Tag Manager, no advertising pixel, and no privacy-friendly analytics either — we simply do not count.

The typefaces are served from ratekon.com rather than from a font service, so loading a page tells no third party that you visited.

How long we keep it

Contact form submissions are deleted automatically two years after you send them. A scheduled job runs daily and removes anything past that point — this is not a policy we rely on someone remembering.

Two years is a ceiling, not a target. It runs from when you sent the message, and nothing we do internally extends it: replying to you, marking your enquiry as handled, or opening the record makes no difference to when it is erased.

You can ask us to delete your data sooner, and we will. We will keep something longer only where the law requires it.

Your rights

Under the GDPR you may ask us for a copy of the personal data we hold about you, ask us to correct or delete it, ask us to restrict how we use it, object to our use of it, or ask for it in a portable form. Where we rely on your consent, you can withdraw it.

Email contact@ratekon.com and we will respond within one month.

Complaints

If you think we have handled your personal data badly, please tell us first — it is usually the fastest way to fix it.

You also have the right to complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, info@aki.ee, www.aki.ee. If you live or work in another EU country, you may complain to your local supervisory authority instead.